mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-78hx-gp6g-7mj6 GHSA-v727-f437-6cxx GHSA-q262-3hfr-f5q4 GHSA-2x8c-95vh-gfv4 GHSA-67gf-x3r4-p4fq GHSA-g5qj-pfmg-p3jp GHSA-wg3w-75pp-j436
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-78hx-gp6g-7mj6",
|
||||
"modified": "2024-07-22T06:31:08Z",
|
||||
"modified": "2024-07-24T00:31:18Z",
|
||||
"published": "2024-03-20T18:10:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-1394"
|
||||
@@ -134,10 +134,6 @@
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:3265"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:3352"
|
||||
@@ -174,6 +170,14 @@
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4672"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4761"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4762"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2024-1394"
|
||||
@@ -285,6 +289,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:2767"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:3265"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-v727-f437-6cxx",
|
||||
"modified": "2024-07-17T00:32:52Z",
|
||||
"modified": "2024-07-24T00:31:18Z",
|
||||
"published": "2023-12-21T21:30:31Z",
|
||||
"aliases": [
|
||||
"CVE-2023-6546"
|
||||
@@ -37,6 +37,14 @@
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2023-6546"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4731"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4729"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4577"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-q262-3hfr-f5q4",
|
||||
"modified": "2024-07-09T18:30:42Z",
|
||||
"modified": "2024-07-24T00:31:17Z",
|
||||
"published": "2024-05-08T03:30:37Z",
|
||||
"aliases": [
|
||||
"CVE-2024-4418"
|
||||
@@ -29,6 +29,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4432"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/errata/RHSA-2024:4757"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2024-4418"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-2x8c-95vh-gfv4",
|
||||
"modified": "2024-07-23T21:31:37Z",
|
||||
"modified": "2024-07-24T00:31:18Z",
|
||||
"published": "2024-07-01T15:32:33Z",
|
||||
"aliases": [
|
||||
"CVE-2024-6387"
|
||||
@@ -284,6 +284,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2024/07/23/4"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2024/07/23/6"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-67gf-x3r4-p4fq",
|
||||
"modified": "2024-07-24T00:31:17Z",
|
||||
"published": "2024-07-24T00:31:17Z",
|
||||
"aliases": [
|
||||
"CVE-2024-38176"
|
||||
],
|
||||
"details": "An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.\n",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38176"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38176"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-307"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-07-23T22:15:08Z"
|
||||
}
|
||||
}
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-g5qj-pfmg-p3jp",
|
||||
"modified": "2024-07-23T21:31:37Z",
|
||||
"modified": "2024-07-24T00:31:17Z",
|
||||
"published": "2024-07-02T21:32:15Z",
|
||||
"aliases": [
|
||||
"CVE-2024-39894"
|
||||
@@ -44,6 +44,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2024/07/23/4"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2024/07/23/6"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-wg3w-75pp-j436",
|
||||
"modified": "2024-07-24T00:31:17Z",
|
||||
"published": "2024-07-24T00:31:17Z",
|
||||
"aliases": [
|
||||
"CVE-2024-38164"
|
||||
],
|
||||
"details": "An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link.\n",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38164"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38164"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-284"
|
||||
],
|
||||
"severity": "CRITICAL",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-07-23T22:15:08Z"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user